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Abstract. An equal superposition query with |0) in the response register is used in the 
"standard method" of single-query algorithms for the hidden subgroup problem (HSP). 
Here we introduce a different query, the character query, generalizing the well-known phase 
kickback trick. This query maximizes the success probability of subgroup identification 
under a uniform prior, for the HSP in which the oracle functions take values in a finite 
abelian group. We then apply our results to the case when the subgroups are drawn from 
a set of conjugate subgroups and obtain a success probability greater than that found by 
Moore and Russell. 



1. Introduction 

The Hidden Subgroup Problem (HSP) has been the focal point of investigations into 
quantum algorithms for some time. Motivation for this direction of research originates in 
the wide variety of problems in classical computation that can be formulated as or can be 
reduced to instances of the HSP [1] . Some had been solved or were at least problems of great 
interest, like the prime factorization of an integer, prior to the HSP formulation. In that 
and other such cases involving the abelian group Z/ (A^), the Quantum Fourier Transform of 
Shor [2] proved an invaluable tool for solving the HSP efficiently. Not all problems involving 
the HSP have underlying groups that are abelian. There are problems that have significance 
in classical computation for independent reasons, with connections to non-abelian groups. 
Among these, Ettinger and H0yer [3] have considered the graph isomorphism problem, and 
Regev [1] has considered the search for the shortest vector in a lattice (SVP), reducing these 
problems to HSPs over the symmetric group and the dihedral group respectively. Thus, 
many families of groups have been studied as a result of the HSP assuming a central role as 
a problem of interest. 

Over time, the statement of the problem has evolved in a subtle way due, in part, to the 
availability of ideas in related areas of decision and estimation theory. In the earlier version 
of the problem, an unknown subgroup is hidden by an oracle function, provided via responses 
to queries. The goal is to determine the subgroup with maximum probability using a poly- 
nomial number of queries, with polynomial time computations, and utilization of polynomial 
space resources in the size of the group (i.e., efficiently). More recently, a different version 
is also being pursued, one that arises when average case solutions are more relevant. In this 
version, the aim is to find with highest probability the correct subgroup from an ensem- 
ble of subgroups that the oracle could hide. This ensemble is assigned a prior probability 
distribution giving the likelihood of a particular subgroup being the hidden subgroup. A 
measurement and a decision algorithm are chosen to maximize the detection probability. 
This moves the problem to the domain of estimation, where a state discrimination approach 
originally proposed by Holevo and Yuen, Kennedy, and Lax |H] comes to the fore. This 
is more of a measurement based approach, in which a measurement is optimized to glean the 
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most information for the decision stage. This approach to the HSP originated in the work of 
Ip [7]. His result showed the optimahty of Shor's algorithm, for an abelian group and under 
the assumption of equal prior on all the possible subgroups. 

There is a wide variation in approaches to solve the HSP. Kitaev [S] and Mosca and 
Eckert ^ have done seminal work concerning abelian groups, and similarly Ettinger and 
H0yer [TU], Kuperberg [TT] and Regev [12] have done work of great significance on the dihedral 
group. As the choice of measurement strongly affects the performance of an algorithm. 
Bacon, Childs and Van Dam |T3l|ll], Moore and Russell Bacon and Decker [16j, and 
Krovi and Roteller [17], have derived important results on optimal measurements, both for 
general finite groups and for specific families of non-abelian groups. In the context of state 
discrimination, several of these algorithms have employed a particular measurement with 
much success: the Pretty Good Measurement (PGM) |il3] - [T5] . The PGM will be used in 
our treatment as well. It is often best viewed in the Fourier domain. Besides the PGM 
implementation, one encounters the non-abelian Fourier transform quite commonly in HSP 
algorithms, which are surveyed in [TSKin] . We see applications of Fourier transform in HSP 
problems such as that in Hallgren, Russell, and Ta-Shma [20j, where they use it for normal 
subgroup reconstruction, and in a host of other HSP algortihms [T5] - [T7t l2T | [22]. This has 
naturally led to efforts to find efficient algorithms to implement Fourier transform, which is 
itself a non-trivial problem. Among others. Hales and Hallgren [23] have results for abelian 
groups, and Moore, Rockmore and Russell p3] have those for non-abelian groups. 

We are concerned with the state discrimination version of the HSP, continuing to approach 
it as an optimization problem. Instead of keeping the query independent of the structure of 
the problem, however, we take the first step in the direction of optimizing the query, making 
it into a joint query-measurement optimization. Consistent with most of the literature, we 
impose an abelian structure on the set in which the oracle function takes values. This allows 
us to get more control over the query, though not completely since there is no assumption 
concerning the group to which the hidden subgroup belongs, except that it is a finite group. 
We discover that with that simple constraint, the query that works best is one that generalizes 
the phase kickback trick. The latter was first used to solve Deutsch's problem, namely, to find 
the parity of a function on the set {0, 1}. As we will explain in the next section, Deutsch's 
problem is actually an HSP. 

We begin our discussion with a brief introduction to Deutsch's problem, which illustrates in 
key ways the ideas of this paper. These ideas are summarized, together with our assumptions 
and results, in subsection II. 3[ under the title query search. 

1.1. The phase kickback trick. The Deutsch-Jozsa algorithm [25l[26] is one of the earliest 
examples of quantum algorithms. It determines if a function: 

/:Z/(2)^"^Z/(2) 

is constant or "balanced" (0 on exactly half of the domain). The phase kickback trick [27] 
version of the algorithm solves the problem with one oracle query. Its underlying problem 
(Deutsch's problem) for single bit (n = 1) is an instance of the hidden subgroup problem 
(HSP). Being a basic example, it provides a good motivation for the rest of the discussion 
and a chance to familiarize the reader with some concepts and definitions that will come up. 

We follow the path in [2B] to recall the algorithm and compare the "standard method" 
(as defined in ^22j) with the "phase kickback trick". 
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We are given an oracle O f that implements the function f as a, unitary transformation on 
C[Z/(2)] ®C[Z/(2)]: 

Of : \x)\y) ^ \x)\y + f{x)) 

The first qubit on which the oracle evaluates the function / is the "query register" , and the 
second qubit to which the oracle evaluation is added is the "response register" . 

In both the methods, the initial state, or the "query" , is oftheform: \^) = ^{\0) + \l))\v). 
In the standard method for Deutsch's problem \v) is set to |0). In the phase kickback trick 
\v) is set to ;^(|0) — |1)). It is this response register part, \v), of the query that we will refer 
to as the "slate" of the query. Let us write the two queries. 

1^,) = -75(10) + |1))|0) (the standard query) 

I ^p) = 1 (1 0) + 1 1) ) ( 1 0) - 1 1) ) (the phase kickback query) 

Recall the Hadamard transform H, Fourier transform on Z/(2). Its action on the computa- 
tional basis is: 



„ / |0) ^^(|0) + |1))=:|+) 
I |1) ^7l(|0)-|l))=:|-) 



Rewrite the queries in terms of 1+) and |— ): 

\^s) =|+)|0) 
\%) =l+)|-) 

In the standard method, the state after the oracle evaluation is: 

Of\^s) = ^\+)\+) + ^((-ip^|o) + (-i)^(^)|i)) I-) (1) 

whereas for the phase kickback trick, the state after oracle evaluation is: 

0/|*p) = -^((-1)^(°)|0) + (-1)^(^)|1)) I-) (2) 

Next is the measurement. Consider the state O/j^^) arising from oracle evaluation on the 
standard query first. An application of the Hadamard transform H to each register (denoted 
by H (g) H), rotates the state to: 

H ® H (0;|*,)) = i=|0)|0) + ^ [ ((-l)/(°) + (-!)/«) |0) 

+ ((_l)/(0) _(_!)/(!)) |1) 

Measure the response (second) register. If the result is 0, which occurs with probability 1/2, 
there is no information about the function. Output either "constant" or "balanced" (random 
guess), which would be correct with probability 1/2. If the result is 1, then measure the query 
(first) register. If the result is 0, output "constant". If the result is 1, output "balanced". 
With overall probability 3/4 we get the correct answer. 

Note that we can work solely with the query register to get the same result through a 
slightly different route. Apply H to the query register (denoted by H (g) I, where I is the 
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identity operator on C[Z/(2)]). 

H ® I (Ojl^,)) = i=|0)|+) + ^ [ + |0) 

Measure the query register and output "constant" if the result is 0, otherwise output "bal- 
anced". The algorithm succeeds with overall probability 3/4 as before. So instead of making 
measurements on both the registers, we may as well just measure the query register. 

Now consider the state after oracle evaluation on the phase kickback query , 0/|\l'p). 
Apply H to the query register. 

H^l{Of\%)) = + |0) + - I-) 

Measure the query register. If the result is 0, output "constant", otherwise output "bal- 
anced". With probability 1 we get the correct answer. The measurement is the same for 
both the methods and is confined to the query register. This measurement (including the 
Hadamard transform) of the query register is what we refer to as the "measurement for 
Deutsch's problem". It can also be described as the measurement in the basis {|+), |— )} 
(without the Hadamard transform) of the query register. If the result is |+), output "con- 
stant". If the result is |— ), output "balanced". 

This calculation is used to compare the probability of success of the two queries in iden- 
tifying the function as being constant or balanced. While demonstrating that, it raises the 
question of how in general would one be able to derive such a query. We approach the 
problem from the perspective of query search. 

1.2. The hidden subgroup problem and the state discrimination approach. Let us 

recall the general hidden subgroup problem as stated in [D]. 

Hidden Subgroup Problem (HSP) Let G be a group, X a finite set, and f : G ^ X a. 
function. There exists a subgroup H < G such that / is constant and distinct on the cosets 
(assume left cosets) of H. That is, the function has the property: 

figh) = fig) ^heH, geG (3) 

and fig) = fig') <^=^ g' G gH. f is accessed via queries to an oracle. Using information 
gained from evaluations of / via its oracle, determine a generating set for H. 

We say that the function / hides the subgroup H, and the oracle implements the function 
/. We call X the "response space", C[G] the "query register" and C[X] the "response 
register". Together they form the system C[G] (g)C[X] on which the oracle and measurement 
act. 

Within the standard method, optimal measurements have been determined in many cases 
using results from the state discrimination approach. In this paradigm, a measurement is 
deemed optimal if it maximizes the probability of subgroup identification over some set of 
subgroups of G distributed according to a (usually uniform) prior probability. Optimality can 
be confirmed by verifying simple checkable criteria due to Holevo [5] , and Yuen, Kennedy, and 
Lax [28j. This technique has been shown to be very useful [l3l[T5l[T6] in works investigating 
optimal measurements. 

In state discrimination, the objects to be distinguished are a set of states {pk}k<^x on some 
finite dimensional Hilbert space V , indexed by a finite set and distributed according to 
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a probability function {pfcjfcejr such that pk is the prior probabihty of occurrence of p^- A 
measurement on V is described by a set of operators (POVM) S' := {Ek}k(zj(f. These satisfy: 
Ek > and Xlfcex -^^ ~ "where I is the identity operator. The measurement operator Ek 
corresponds to the outcome k, associated to the state pk- The probabihty of successful state 
discrimination using a measurement S' = {Ek}keJ(r is: 

S{S) := Pk tr (EkPk) (4) 

The idea is to find a measurement that maximizes S{(S') over the set of all measurements. 
Such a measurement is deemed optimal. 

In Deutsch's problem for single bit, the relevant HSP is as follows. The group G = TLj (2). 
The response space is X = Possible hidden subgroups are: Hq := G and Hi := {0}. 

Constant functions hide the subgroup Hq and balanced functions hide Hi. The system is: 

^ ■= C[G] ® C[X] = C[Z/(2)] ® C[Z/(2)] 

State of the system after querying the oracle implementing a function / in the standard 
method is given by ([T]). Since we are interested in measurements on the query register C[G], 
we need only consider the reduced density operator for the query register, as shown in Nielsen 
and Chuang [T]. This is found by taking the partial trace over the response register C[X]: 

tr^j^j ^Oj|^s)(\I^s|Ojj . If / is constant, i.e., hides Hq, the mixed state (reduced density 

operator on the query register) is: 

Ps, ■■= |+)( + | 

If / is balanced, i.e., hides Hi, the mixed state is: 

Ps,:=l{\+){+\ + |-)(-|) 

Bacon and Decker [16] derive the optimal measurement for the standard method single- 
query HSP for a finite group G, assuming that there is a uniform prior probability on the set 
of all subgroups of G of being hidden by the oracle function. To underscore the issue, they 
show at the outset that the aptly named Pretty Good Measurement (PGM) which is 
optimal in this sense for several important cases, is sub-optimal for Deutsch's problem. The 
PGM, denoted by ^ = {Mk}kejr, for the general states setting is defined as: 

Mk := Pk P'^^'^PkP'^^'^, P-= Pfc Pk 

keJf 

P'^^"^ ■= [p |lm(p)) ©iKcr(p) (5) 

For Deutsch's problem using the standard method with the assumption of uniform prior 
probability on the subgroups, the PGM, denoted by = {Ms^, Ms-^}, becomes: 

Mso = l\+){+\ '"'"^ ^^^i = ^l+)(+l + |-)(-| 

which has the success probability 5^ = 2/3 by (jlj), less than the 3/4 obtained by the stan- 
dard method above. The measurement for Deutsch's problem (defined in section [TTT] as the 
measurement on the query register for both the standard method and the phase kickback 
trick) written as a POVM, is: 

Eo:=\+){+\ and := |-)(-| 
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Let US take a look at the phase kickback trick for Deutsch's problem, and compute the mixed 
states for this case using ([2]). If / is constant, i.e., hides Hq, the mixed state is: 

If / is balanced, i.e., hides Hi, the mixed state is: 

Pp, ■= |-)(-| 

It is apparent that the PGM, denoted by = {Mp^, Mp^}, for this set of mixed states is 
given by: 

Mp, = = ^0 and Mp^ = |-)(-| = Ei 

which is the measurement for Deutsch's problem, yielding a success probability of 1, certainly 
optimal. This contrasts with the standard method for which the PGM was found to be sub- 
optimal. By definition, the PGM depends on the set of mixed states to be distinguished, 
which in turn depends both on the possible subgroup that the oracle hides and the query 
presented to the oracle. The question of optimality of the PGM, or for that matter any 
measurement, is perhaps better posed in that context. It is interesting that the particular 
measurement ^p which is optimal for the phase kickback query also works well for the 
standard query and is in fact optimal. We can verify this by the construction of Bacon and 
Decker [TB], or by the checkable optimality conditions of Yuen, Kennedy, and Lax [28j. Under 
some assumptions, we find that a wider set of queries have shared optimal measurements. 

1.3. Query search. We build upon the paradigm of state discrimination hitherto adopted. 
Much of the literature on the subject considers HSP for a finite group G. This is also what 
we assume. We impose no restrictions on the set of possible hidden subgroups, letting that 
set be some arbitrarily chosen set of subgroups of G. We work with the following reasonable 
assumptions: there is a uniform prior probability on the given set of subgroups of being 
hidden by the oracle function, and similarly there is a uniform prior probability that the 
oracle implements a function from the set of functions hiding a particular subgroup. The 
former is granted in [T31IIS1IIS] , and the latter is within the spirit of the HSP where the value 
of a function gives no information about the hidden subgroup. Although in the definition of 
the HSP, the response space X can be any finite set, in the literature and the instances with 
which we are familiar, it is some abelian group of finite cardinality. For example, Regev 
takes advantage of this structure in his reduction of the shortest vector in a lattice problem 
(SVP) to HSP over the dihedral group. Having this structure on X allows us to look for 
ways in which it can be exploited to enhance the success probability of an HSP algorithm. 
It is consistent with the oracle action definition for the general HSP. We consider the queries 
that are in an equal superposition state over the group and arbitrary in the slate (state 
of the response register C[X]), referring to these as the equal superposition tensor product 
or ESTP queries. We consider algorithms in which the measurements are restricted to the 
query register C[G]. 

Previous works p ^ [T5 | [T6] investigating the optimality of measurements for the standard 
method have used the maximization of the probability of subgroup identification as a cri- 
terion. We extend the criterion of optimality to ESTP queries: to be optimal, a query 
need maximize the probability of subgroup identification over all measurements and over 
all ESTP queries. It turns out that a generalization of the query used for phase kickback 
has the highest success probability. We call such a query a "character query": its slate is a 
particular character of X. 
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In section [2] we describe the context, exphcitly state the assumptions and the class of 
algorithms to be used, and review some background material. In section [3] we motivate and 
develop the main result concerning the mixed state obtained after the oracle evaluation on 
a query, assuming the oracle hides a particular subgroup. Perhaps somewhat curiously, this 
state does not depend on which abelian group X is, and depends only on its cardinality, 
i.e., the dimension of the response register. In section H] we give definitions of the "standard 
query" and the "character query". We find that any measurement can be taken to be an 
element of the group algebra C[G] acting by the right regular representation. Further, the 
success probability of any query is linearly dependent on that of the character query. More 
importantly, besides the phase multiples of a constant query, all ESTP queries have identical 
optimal measurements. This allows us to reuse previously known optimal measurements, 
specially those from the vast literature on the standard query based HSP. In section |5] we 
prove that the character query has the maximum probability of success, and does strictly 
better than the standard query. This gives us an explicit example of a query that satisfies 
our optimality criterion. We then take another look at the Deutsch's problem for single 
bit. In the process we re-explain why phase kickback works as well as it does for Deutsch's 
problem in the single bit case from a representation theory point of view, with a clue to 
other problems in the HSP category. In section [6] we derive the success probability when 
the family of subgroups consists of conjugates. We find an improvement over the success 
probability found by Moore and Russell [15], and describe how this case contrasts with 
Deutsch's problem. Section [7] is the conclusion and discussion section. 



2. Background 

To begin, we define some terms that are relevant to this discussion. We have the following 
data: a finite group G, a set ^ = {Hk}ke._r of subgroups of G indexed by a finite set ^ of 
cardinality K := For a subgroup G we denote its index by Nk := [G : Hk]. The 

probability that the oracle function hides any particular subgroup Hk E ^ is 1/K. 

We fix the response space X to be some finite abelian group. Up to isomorphism, we can 
assume that X = Z/(p"^) x . . . x for some primes Pi and some m, G Z+. Let 

D := Then D = . . ■p'^. By necessity D > max^g^jA^fc}. Associated with each 
subgroup Hk G we have the set of all the oracle functions that satisfy condition 
for the subgroup Hk. 

•'^k :={/:G'— )-X|/is constant and distinct on the left cosets of Hk\ 

The probability that the oracle implements a function / G ^k given that the function hides 
the subgroup Hk is l/|^fc|. 

We have a Hilbert space, describing the composite system. It is the tensor product of 
the query register: C[G], and the response register: C[X]. 

^ ■= C[G] ® C[X] 

We introduce the computational basis of C[G] consisting of the 6 functions: 

^""^^^ I 0, otherwise 

We also write 1^;) := 6z- Then an element |0) G C[G] has a unique expression as a sum 
10) = J2„eG^9\9)- 
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C[G] has an inner product: 

where 1? = EgeG^sl^)- 

We remind ourselves of translations of C[G] in the manner of Goodman and Wallach 
We denote by L and R the left and right translation representations of G on C[G]. On the 
element: 

10) = 5^0,1^7) gC[G], 

z E G acts by: 

Liz)\<l>):=J2<t>s\^9) (6) 

RizM:=Y,<l>s\9^-') (7) 
g&G 

This induces corresponding actions by the computational basis \z) G C[G]. Extend by 
linearity to get the left and right regular representations of C[G] on itself, also denoted by 
L and R: 

L,R:C[G] ^End(C[G]) 

We have a similar description for C[X] except that X is abelian and we use "+" to designate 
the group operation in X. We have an inner product on (defined as for C[G]) compatible 
with the tensor product structure. In the ensuing discussion, relevant inner products (-I-) 
and norms ||.|| induced by them will be inferred from the context. 

An oracle implementing a function / is described by the unitary operator O / which acts 
on a basis state \g) ^ \y) E ^ by : 

Of:\g)®\y)^\g)^\y + f{g)) 

Hence oracle evaluation of / on the state of the query register C[G] is added to the response 
register C[X]. 

Definition 2.1. A query is a unit norm state in presented to the oracle for evaluation. 
The set of queries is then: {|^) e : |||^)|| = 1}. 

Queries of interest to us are assumed to be in an equal superposition state over the group 
but arbitrary in the response register. We refer to them as the equal superposition tensor 
product (ESTP) queries. Denote this class of queries Qo C J^. 



1 



Q,:={—={J2\9)]®H --Iv) GC[X],|||t;)|| = l} 



seG 

We restrict the algorithms to those comprising the following steps: 

(i) Prepare a query |\E') G Qq. 

(ii) Evaluate the oracle on 1^^). 

(iii) Measure the query register using a measurement (POVM) = {Ek}k£.jfr- Observe 
the outcome k and decide upon the corresponding Hj. G =5^ as the hidden subgroup. 

A query |^) = —^(^ ^^gg Is')) ® 1^) ^ is determined by the tensor factor \v) G C[X]. 



/\G\ 

This prompts the definition of a slate. 
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Definition 2.2. Let |^) = ^^(EgeG 1^)) ® 1^) be an ESTP query. Its response register 
part \v) is tlie slate of tlie query 

We define ttie set of slates 5*0 := {\v) G C[X] : = !}• By definition, 5*0 can be 

identified with Qq: 



gdG 

Given this identification, we will refer to queries |\E') = \v) = -^={J2aeG Id)) ® 1^) 

their slate \v) and vice versa. 

We recall the Fourier transform on X: 



\uj-y) (9) 



where y = = (x,-) eX,u= (uj), = e'^^/f. and a;^-" = . . . w^'"""'. 

A slate \v) can be written in terms of the characters, jcu"^), of X. 

\v) = ^(3^Juj-y) where (3^,y := {uj-y\v) (10) 

3. Subgroup States 

States arising from functions / G (constant and distinct on the left cosets of H^) 
are in some sense described by the same subgroup H^. and a reasonable measurement 
should target that subgroup. Before we make this precise, let us consider the state af- 
ter the oracle implementing some function / (not necessarily in has acted on a query 



m = -h(T.yeG\9)]®\v)eQo 



where {f3v,y}y£X are as in flTU]) . We denote the mixed state of the query register by p^^: 



yex ^g,g'eG 

Recall the definition of a measurement as relevant to our discussion. A measurement 
(POVM) on the query register C[G] is described by a set of operators S' := {Ek}^^^ where 
Ek G End(C[G]) and satisfy: 

(i) Efc > Vfc G 

(ii) Efcejr = I 

Here I is the identity operator on C[G]. 

If the state of the query register is given by a density operator G End(C[G]), then the 
outcome k G is observed with probability tY{Ej^p^). By choice, the measurement operator 
Ek is associated with the subgroup Hk, so that a measurement outcome k corresponds to 
the subgroup Hk- 
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Given a slate 1^) and an oracle implementing the function /, the mixed state of the query 
register C[G] after oracle evaluation is Pj,^ (fTTl) . The probability of observing the outcome 
k' is tr^EyPf^). Now assume that the oracle hides the subgroup Hk. Since all the / G 
are assumed equally likely, the probability of outcome k' given that the oracle hides the 
subgroup Hk, is described by the following probability function: 

This leads us to the following notion: 

Definition 3.1. A subgroup state for the subgroup and slate \v) is a mixed state, obtained 
by averaging {p^^jjg^^, from ([TTj) . Denote this state p^^. 

p^^g{k'\k) can be written as a function of the subgroup state as: 

p,Ak'\k)=tT{Ek'P,J (13) 

A subgroup state aggregates the mixed states resulting from oracle functions hiding a 
particular subgroup into a single mixed state. A measurement aims to distinguish such 
subgroup states. 

To be able to work with oracle functions, however, we must make a few identifications. 
By definition, an oracle function / G ^k, hiding the subgroup Hk € factors through 
quotient by Hk. Denote the quotient map by g^. (fixed by the choice of A; G 

q^:G^G/Hk, g^gHk 

To enumerate the various sets consistently, we can identify X with the set {0, . . . ,D — 1} C 
N as follows: 

m j — 1 

ix-.X ^{0,...,D-1}, x= (x,) ^ \[pT 

j=i i=i 

For n G {0, . . . , D — 1}, define the set of "first n elements in X" : 

X^ :=.^i({0,...,n-l}) 
For each k G J^, we can identify the cosets G/Hk with X^v^. Fix such an identification l^. 

i, : X^, ^ G/Hk (14) 
With these constructions in hand, / G can be written as a composition: 

f = fkoq^=-roL-^ oq^ (15) 

as shown in figure [H where f '■ G/ — > X and 7 : X^^ X are the unique maps such that 
the diagram commutes. 

It is then immediate that 7 is injective. As XjVj. C X, 7 is also the restriction of some 
permutation of X to Xjq^. Let the set of such restrictions be given by the set F^. 

Tfc := {a\x^^ : CT G Sx} (16) 

Denote by Sx the group of permutations of X. Then for each 7 G F^, the set: 

:= {o- G Sx : (y\xM^ = l) (17) 
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G ^ ''> G/ Hk > Xn^, 

7 

X 

Figure 1. Oracle function / factors 




has cardinality {D — N/^)!. Since such sets partition Sx, the number of possible oracle 
functions / G for every subgroup E y is: 

D\ 

{D-Nk)\ 

With our specific factorization, an oracle function / can be given as follows: 

/ G U,,^^fe ^ (A;, 7) G ^ X Tfc (18) 

where 7 G is the unique map such that the diagram in figure [T] commutes. 
Our first result pertains to the form of the subgroup states {p^ ^}kej(r- 

Theorem 3.2. Let the subgroup hidden by the oracle be G . Let \v) be a slate. 
Then the subgroup state p^^ is given by an element V'j.^ G C[G] acting by the right regular 
representation : 

= l/3.,o|Vo) + (l-|/3.,or)l¥^,,o) 
where (3^^ = {u^\v) is as defined in (ITU]) , and: 



geG 



Proof. We begin by defining the coset state for gHk G G/Hk- 



V l^fcl ,,^H^ 



For an oracle function / G ^k, we rewrite the mixed state of the query register (fTTl) in terms 
of the coset states, taking account of the oracle function property that it factors through 
quotient by Hk. Hence, using ( ITSjl we can write: 

P.. = El/5-1' E --H/>)-/V))|,)(e'| 

^ yeX c,c'GG/Hk 

Under the identifications ( !T^ and (fT8|) : / (A;, 7). We can recast p^.^ as: 



k 



Pk,v £-)! 5^ Pf,v 
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Averaging over all 7 G F^. from ( !T6|) . results in the subgroup state ^ (fT2|) . 
(D-iV,)! 

Since the sets S*^ (ITTl) all have the cardinality — A^a,.)!, we can average over Sx instead of 
Ffc. Then: 

y&X ^ • aeSx r,T'(iXM^ ^ 

For y E X, we define: 
Then we write p, as: 

= E If^^J'pKy (19) 

We consider the operators p^, ^ above for y & X. When y = 0: 

'''■-(7kg''0(7kg<^') 

which is simply the projection on the equal superposition state in C[G]. 
When y ^ 0, we find that: 



E E i^w)(^(r)i(^E 



^-jc(o-(r)-cr{r')) 



The set {r ^ r' E Xjy^} can be written as Xjv^. x Xjv^ \ A(XjVj.), where A denotes the diagonal 
map defined for any set S as: 

A:S^SxS, st->(s,s) 

We compute the sum in the inside bracket in the expression for p^ ^ above. For a pair (r, r') G 
Xtvj. X XTVt. \ A^Xn^), define the set fl(r,r') of pairs obtained by evaluating permutations in 
Sx on the pair (r, r'). 

{(a(r),(T(r')) : a G Sx} C X x X \ A(X) 

We make two observations. Firstly, fl{r,r') = X x X \ A(X). Secondly, for every pair 
{s,s') e X xX\ A(X) the set {a G Sx': ((j(r), a(r')) = has cardinality {D - 2)!, 
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and such sets partition Sx- They imply: 



{D-2)\ 


D\ 








{D-2] 


)! 


D\ 








{D-2] 


)! 


D\ 




(D- 


2)! 


D\ 




1 




{D- 


1) 



,s')eXxX 



where the second to last equality is straightforward from the fact that any nontrivial irre- 
ducible character of a finite group sums to 0. We continue with p^^ simplification: 



With the identification in (HH), this becomes: 



It is worth noticing in the above expression that: 

is the projection on the span of coset states associated with Hk-, and 

E i^)(^'i = ^^(^Ei^))(^E(^i)=^^/^.o 



c,c'&G/Hk ^ V 1^1 geG ' ^ V 1^1 geG 

. where ^ is as in f l2U]) . 

We see that p^, ^ is independent of and p^. ^ is also independent of k. Consequently, we 
define: 

^° (^^Ei^))(^^E<^i 

geG ^ VV geG 



(21) 
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from which follows that we can write ^ in ( !T9|) as: 

= |/3,,o|'A. + (1 - l/3.,or)p,,o 

One readily checks that the operators p^ in (l20l) and g in ( 12T|) commute with the left 
translation (|6]): 

which implies that p^ and p^, ^ are given by elements of C[G] acting by the right regular 
representation, found by evaluating the two operators at the identity of C[G]. We write: 

Po = ^(l<^o)) 

where: 

1^1 gee 

□ 

4. The Character Query and Optimal Measurements 

To compare ESTP queries, we would like to quantify a query by the highest success 
probability it can achieve with any measurement. In that connection, we denote by the 
set of all POVMs on the query register: ■= ■ S ?i POVM on CfG]}. 

Fix a slate \v). Given that the oracle hides the subgroup if^, the probability of correctly 
identifying it using a measurement S = {Ek}k(^x is Pv,s{k\k) = tr(_Efc Pk v) ffT3|) . All the 
subgroups in the set of subgroups ^ are equally likely to be hidden by the oracle, with a 
uniform prior probability over =5^. So the probability of successful subgroup identification 
denoted Sy^^ is: 

^^'■^ P^Ak\k) = -^Y *^(^^ ^fe.") 

This is exactly the probability of successful state discrimination in in which the mea- 
surement S" = {Ek}k£jr is used to distinguish the subgroup states {Pf,^}k£je' distributed 
with prior probability {pk}k&jfr given by = 1/K (section [O]) . As (§ varies over Sq., we 
get a function S"^ on the set of POVMs (pg, giving the probability of successful subgroup 
identification. 

Definition 4.1. The success probability of a slate |f), denoted by 5"^, is a function on S'g'- 

Sy-.Sc ^ [0,1] 
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We call Sv{S') the success probability of the slate \v) for the measurement S". 

To see the topological structure of S'g, a useful alternate description of a measurement is: 

GEnd(C[G])"^ 

where the {Ek}k&.j(r satisfy the conditions in section |3l End(C[G]) is a finite dimensional 
Hilbert space. Give End(C[G'])^'^ the product topology. Then S'^ is a compact subset of 
End(C[G'])^ . Given a slate \v), Sy is continuous. Hence we can define the maximum 
probability, over (o^, of correctly determining a hidden subgroup with a slate |f). 

Definition 4.2. The optimum success probability of a slate \v), denoted by S^, is: 

Sy := max|S'^,((f )| 

By the definition of Sy, there is some measurement that achieves it. Such measurements 
may not be unique. 

Definition 4.3. A measurement ^ G is an optimal measurement for a slate \v) if S'„((f ) = 

Sy 

We will also need a basic result from the representation theory of finite groups [22] . This 
is summarized in Appendix [3 Let G be the equivalence classes of irreducible unitary rep- 
resentations of G. Fix a representation (vr^, V^) in the class A for each X E G. Its dual 
representation is denoted by (vr'*'*, \^'*'*). Let the dimension of be d^. Then the right 
translation (P) is isomorphic to: 

R{z) = ^Iy,*®n^{z) (22) 
AeG 

where I^a* is the identity operator on the space . We denote the trivial representation 
by (7rO,yO). 

Next, we define some specific queries that will be needed in the computation of success 
probabilities. 

Definition 4.4. The character query, the standard query, and the constant query, are defined 
by their slates and the identification in ([8]). 



The constant query : 


l^o) 


:= ^sol^o), 






The standard query : 








■■= |(0,0,...,0)) 


The character query : 




■= hol^c), 


\Vc) 


:= |^(-i,o,...,o)^ 



where la; ^) is as in ([9]). 

We express the success probability of any given ESTP query as a function of that of the 
character query, and show that the optimal measurements are common to almost all the 
queries. 

Corollary 4.5. (i) For any measurement ^ = {Uk}keje'> there is a measurement S' = 
{Ek}ke.x of the form: 

^fc = Iv>^* ® El El e End{V^) 
AeG 
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hence given by elements of C[G] acting by the right regular representation, such that 
and (f have the same conditional probabilities in (fT3|) . That is: 

l^v,s{k'\k) = fiv,'i//{k'\k) W\v) e So, k,k' e J(f 

In particular, Sy{^) = Sy{S) V|f) G Sq. 
(a) Let \v) be a slate. Given a measurement S" G S'g, the success probability of \v) for S , 
S^{^), is: 

In particular, if a measurement is optimal for some slate \v) such that |/3^^o| 7^ 1 
(\v) ^ {e*^|fo) : Q G K}), then it is optimal for every slate. 



Proof, (i) Suppose we are given a slate and a measurement = {Uk}ke.j(f- Then 

Each operator p^^ is isomorphic to a direct sum by Theorem 13.21 and (122]) . Define p^,^ as: 

P... =0Iv-®^'KJ=:p.,. (23) 
AeG 

We have that: the trace of a hnear operator on a finite dimensional vector space is invariant 
under vector space isomorphisms, ^ is a direct sum, and End(y'^* ® V^'^) = End(y'^*) ® 
End(l^^). Thus, there exists Ek' G ^^^^End{V^*) (g)End{V^) such that : tr{Ek'p^J = 
tr(f/fc/pj. ^). Trace, tr : End(V"^*) (g) End(V"^) — )■ C, has the property: 

tr(A ® 5) = tr(A)tr(5) VA G End(y^*), 5 G End(V^) 

This, together with the form of the summands I^a* 7T^{ip^^) in (!23|) . implies that Ek> can 
be chosen so that: 

AeG 

for some E^, G End(K^). Under the isomorphism (l22l) . we can find : 



AeG 



ii): Let = {Ek\k&jr- Using Theorem I3.2[ we can write Sv{^) as: 

= Yl ^<^>^Po) + (1 - HEkpJ (24) 



ka-X ke.x 



Notice that the definition of \vc) makes Pq^^^ = 0. By Theorem 13.21 P^v^ = Pko ~ -^(I'^fco))' 
which makes S^^^S'): 

^-(^) = :^E*^(^^/^m) (25) 

k&X 
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Because ^^e-je -^fc = I and tr(/5o) = 1, 



This simphfies S^{(S') in 



= %^ + (1 - |/3.,on5..(^) (26) 



K 



□ 



5. Success Probability of the Character Query 

We are ready to show that the character query has the maximum success probabihty, 
strictly higher than that of the standard query. Once we have shown this, we take a closer 
look at the Deutsch's problem for single bit. 

Corollary 5.1. The optimum success probabilities satisfy: 

The lower equality is true if and only if |/3^,o| = 1 (1"^^) G {e*^|fo) : G M}), and the upper 
equality is true if and only if 13^^ = 0. In particular, Sy^ < S^^. 

Proof. First, define the trivial measurement to he = {T^}, = -^I, where I is the 
identity operator on C[G]. The success probability of the trivial measurement, for any slate 
\v), is S'^(<^) = This is because tr(p^^) = 1 V/c G 

By Corollary 14. 5 ((ii) we just need to show that there exists a measurement ^ G (^g which 
has a success probability of the character query for Sy^{^), greater than Since the 
trivial measurement £^ has success probability it is sufficient to show: 

3 ^ G : SyS^)< SyX-y^) (27) 

Before defining we consider the subgroup states for the character query, {p^ }fce.yr- As 
seen in Corollary 14.51 Pfc„^ = -^(Iv^feo))- Decompose each |v?t.g) into its Fourier components, 
denoted by for A G G. 



1 



Hk\-TT^^\G\ 



heHk ^ ' geG 

D-Nu 
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For every non-trivial representation \ E G \ {0}: 

1 D ^ 



D 



{D - l)Nk \H, 



^ E ^'(^) (29) 



Also define: 



Note that: 



:= ^ E 



Ker((^^) = nfce,xKer(^^) 
Im((^^) = V^\ Ker((^^) 

We take the measurement ^ = {M^} to be the Pretty Good Measurement from section 
11.21 (!5|). for the subgroup states {p^ ^ }ke.x with prior probability {pk}k<^jf given by = ^IK. 
Using (!23|) and the definitions above we can write the subgroup states as: 



and compute the PGM: 



where: 



AeG 



Here lKer(>^^) is the identity operator on Ker((^'^), and {ip^) is: 

) := [(f |lm(^A)j ©lKer((p^) 

From (125|) . the success probabilities of the character query for the PGM ^ and the trivial 
measurement ^ are: 



AGG AeG /^'G-^ 

^-('^) = ^ E E W^^) = ^ E ^^^^ (^') 



AeG fce^ AeG 



We recall the inner product and norm on Md^{C): 

<A,B> = ti {AB^) 
\\A\\ = Vtr (AAt) 
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where A,B ^ Mrf^(C). This allows S^X^) ^'^d S^X^) be expressed as: 



K 

xeG 

Then the inequality in fl27|) follows from these additional observations: 

(i) 3A G G, and fc, k' G ^ such that ip^ 7^ (^^, 

(ii) E.e^ i^r'^V.i^'y'^" = K VA G G 

and the next lemma. □ 

Lemma 5.2. Let V he a finite dimensional Hilbert space over C. Let {fj}"^^ 6e a set of 
vectors in V . Then: 

^ n n 
i=l i=l 

with equality if and only if Vi = Vj Wi,j G {1, . . . ,n}. 
Proof. 

n n n n 

iT'^W'^if - W^Vif = n^\\v,\f - {Vi,Vj) 

i=l i=l i=l *ij=l 

n 

= ('^-1)^11^*11^ ~ E {{VhVj) + {Vj,Vi)) 
1=1 l<i<j<n 
n 

> {n - l)^^\\vi\\^ - ^ 2||t;i||||t;j|| 

i=l l<«<i<" 

l<i<j<n 

= E (ii^^ii-ii^.ii)' 

l<i<j;<n 

where the inequality above is a result of the Cauchy-Schwarz inequality. The lemma follows. 

□ 

Remark 5.3. In view of Corollary 14. 5 [ an optimal measurement £' = {Ek} can be described 
by: 

AeG 

Using (125]) and (129]): 



fcsjr ^ ^ AeG\{0} heHk 



(30) 



Therefore, the character query performs better as the dimension (D) of the response register 
decreases. 
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Remark 5.4. From the definition of tlie standard query, = l/y/D. We conclude from 



Vx G Z/(2) 



Corollary 14.51 (ii) that lim£i_>oo = S^^. So the optimum success probability of the char- 
acter query decreases to that of the standard query as the dimension of the response register 
increases. 

We now turn our attention to the Deutsch's problem for single bit (n = 1) and understand 
it in our framework. Let us restate the set up from section [L2l The group G = Z/(2). The 
response space is X = Z/(2). Possible hidden subgroups are: Hq := G and Hi := {0}. Con- 
stant functions hide the subgroup Hq and balanced functions hide Hi. The subgroup indices 
are Nq = 1 and Ni = 2 respectively. The system on which the oracle and measurement act 
is: 

:= C[G] ® C[X] = C[Z/(2)] ® C[Z/(2)] 

where the first tensor factor C[G] is the query register, and the second factor C[X] is the 
response register. Since X = Zi/(2), this makes the dimension of the response register D = 2. 
The group G = Z/(2) has two 1-dimensional representations: the trivial representation and 
the alternating representation. 

n%x) = 1 
7r-(x) = (-1)^ 

Phase kickback harnesses the character query: |\I^c) = = + ® l'^ "'^)) where 

CO = —1, and \vc) = = |— ) = :^(|0) — |1)). After the oracle evaluation, we can use 

and ( 12^ to deduce the Fourier components of the subgroup states p^.^^ = R{\ip^,^)). 

Po,.. =^°(l^o,o))®^"(l¥'o,o)) = l®0 

We choose a measurement := {Ek}ke{o,i} follows: 

Ek = El © E- 

where: 

Eq = e° © = 1 © 

El ^ E° © = © 1 

By (l25i) . this measurement has a probability of success S^X'^) = 1. This is precisely what 
we call the measurement for Deutsch's problem in section 11.11 By using the Hadamard 
transform H, the character basis of C[Z/(2)] is rotated to the computational basis, i.e.: 



H 



^(|0) + |1)) ^ |0) 



^(|o)-|i)) ^ |i) 

Measuring in the computational basis is then equivalent to the measurement above. It is 
because the subgroup Hi = {0} has an index the same as the dimension of the response 
register, Ni = D, that it has no projection on the trivial representation. In contrast, the 
subgroup Hq = G has an index less than the dimension of the response register, Nq < D, 
which results in its producing a non-zero projection on the trivial representation. That is 
why the subgroups can be distinguished with probability 1. This illustrates the part played 
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by the dimension of the response register relative to the subgroup indices, and explains the 
algorithm in the group representation context. 



6. Conjugate Subgroups 

We specialize further to a class of subgroups consisting of conjugates of a particular sub- 
group H < G, i.e., ^ = {g~^Hg : g G G}, and determine the optimum success prob- 
ability for any |t>) G Sq. To that end, we exploit a result of Moore and Russell [15]. 
Plancherel measure, denoted by /ip, is the probability distribution on G defined as: 

fip{X) := dl/\G\ forAGG 

In particular: 

/i,(0) = l/|G| 
As in Moore and Russell [15], define the set Ah C G: 

We recognize jj^ YIiK&h '^^W as the projection onto the space of if-invariants in A G G. 
Denote the normalizer of in G by Ng{H). 

Corollary 6.1. Let H <G, andY = {gHg-^ : g eG}. Let N := [G : H] and Nq := [G : 
NG(i^)]. Then for any slate \v) , the optimum success probability, Sy, is given by: 

D \H\ 



+ (1 - \/3v,i 



-/ip(AH) 



{D-1)J Nc ' '(D-l) Nc 

Proof. Let the subgroup indexing set be J(f = G/Ng{H). Then K = = Nq. As 

f^o ~ l/v^ (the case of standard query), by Corollary 14.51 (ii) an optimal measurement for 



\vs) is optimal for any slate \v). Moore and Russell [15] have shown that the Pretty Good 
Measurement (PGM) for the standard query is such a measurement, and also derived its 
success probability. Using their result: 



From Corollary 14.51 



l/3o... 



N. 



c 



1 , (D-l) ^ 



DN, 



c 



Together they imply: 



D \H\ 
(D-l)iVc 



D 



{D - l)Nc 



Applying Corollary 14.51 (ii) again, we get the result we seek. 



□ 
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Remark 6.2. Unlike in Deutsch's problem, here the subgroup states for the character query 
all have the same projection on the trivial representation, by (128|) . These contribute nothing 
toward distinguishing the subgroups, and are eliminated if the dimension of the response 
register is the same as the index of H, i.e., ii D = N. Assuming such is the case, from the 
proof of Corollary 16. the character query succeeds with probability: 



7. Conclusion and Discussion 

We have addressed the problem of query selection for the single-query hidden subgroup 
problem (HSP) over a general finite group G and an abelian response space X. Our results 
indicate that for a single-query algorithm with measurements of the query register, and 
among the class of queries in an equal superposition state over the group, we can maximize 
the subgroup identification (success) probability using a query that has no projection on the 
constant query (defined as the equal superposition over the group as well as the response 
space). The character query is an example of this set of queries contained in the |X| — 1 
dimensional subspace (in the above discussion D = \X\) orthogonal to the constant query. 

This generalization of the phase kickback trick explains the phase kickback for Deutsch's 
problem (single bit) in representation theoretic terms. It arises naturally when we analyze 
how the success probability of the algorithm depends on the choice of the query. Imposing 
some structure (an abelian structure in this discussion) on X is necessary to analyze the 
effect of different queries. The result that the optimal measurements for algorithms in our 
class are common to all ESTP queries other than the phase multiples of the constant query, 
is not something one would expect a priori. It shows why in Deutsch's problem the phase 
kickback trick and the standard method have the same optimal measurement. The character 
query outperforms the query used in the standard method single-query HSP algorithms, and 
gives an improvement over the success probability of Moore and Russell [15j for conjugate 
subgroups. 

For the character query itself, the success probability decreases as the response register 
dimension |X| increases; an example is the conjugate subgroups case (where the highest suc- 
cess probability is achieved when the subgroups have the same index as the response register 
dimension). The response register dimension relative to the subgroup indices differentiates 
the subgroups through their projection on the trivial representation. This has the potential 
to improve the success probability, as we saw in the analysis of phase kickback in Deutsch's 
problem, which is somewhat more complicated than the conjugate subgroups case. 

Our approach towards optimizing single queries for HSP depends on conceptualizing the 
oracle functions as given by permutations. By computing with the response space X, and 
developing and interpreting results with respect to the group representation one gains insight 
about queries and oracle action. Finally, recognizing that the structure of the problem 
allows the use of representation theory in conjunction with the PGM (in general a sub- 
optimal measurement), and the analysis of measurements using norms, leads to the proof of 
optimality of the character query. 

We expect aspects of this approach, in particular the resulting generalized phase kickback, 
to have applications in other domains, among them multi-query settings as in Bacon, Childs 
and Van Dam [13] and Meyer and Pommersheim jSOj . 
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A RESULT FROM THE REPRESENTATION THEORY OF FINITE GROUPS 

The group G x G acts on C[G] by left and right translations. Denote this representation 
by r: 

t{z, w)(j){g) = (j){z~'^gw) for z,g,w E G 

Let G be the equivalence classes of irreducible unitary representations of G, and fix a 
representation (vr^, V^'^) in the class A for each A G G. Let the dimension of be d^. The 
dual representation (tt'*'* , V^'^* ) is given by: 

for z e G,v e V^, and v* G 

For A G G, define ^x{v*^v){g) = {v*,'K^{g)v) for g e G,v* e \^^*andi; G V. Extend to 
a linear map from V^* to C[G]. Under the action of G x G, the space C[G] decomposes 
as: 

C[G] = ^MV'* ®V^) 
\eG 

With this decomposition, the left translation is isomorphic to: 

L(z) = 07r^*(2)®IyA 

AeG 

and the right translation is isomorphic to: 

R{z) ^ 0IyA. ®7r\z) 
AeG 

where lyA and I^a* are identity operators on the spaces and l^'^* respectively. 
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